$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa File: c82277b8-e102-303a-860a-2c9e6c4d49f8.roa (raw, json) Hash identifier: CzEWGQduZliSjMK4nJUSMhuI4EP5hRufZX+6dnbkZ5M= Subject key identifier: B5:E1:23:E2:9C:53:EC:C3:A3:C4:85:D9:0C:1F:13:05:6B:63:9F:6F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A9DC454012A8310AB7EC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9d:c4:54:01:2a:83:10:ab:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=60cf0e94-9757-4f91-9938-b6c677408ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:7c:01:58:01:d2:7c:91:72:66:59:9f:3f: 45:a9:c4:e8:1b:f0:e9:68:75:d6:cf:75:87:f0:61: 0d:b7:c3:d2:21:1f:61:dd:94:7c:33:e4:c1:ee:2e: 58:22:16:14:6f:52:84:8c:81:5d:7c:dd:e5:96:b5: 6a:af:7c:95:98:b3:67:28:6d:88:06:d8:7d:17:44: 42:27:c7:4b:60:f7:27:81:94:bd:3d:f5:3c:11:0f: 33:a8:58:4f:f9:69:a9:fd:8d:c1:d7:4b:8a:fe:18: 17:37:1c:ac:dc:f5:03:dc:2c:0a:42:5e:3c:a0:87: a8:ba:01:39:5b:49:1f:7b:90:0d:90:ea:30:d6:33: 2b:bf:1e:57:85:22:fe:41:b0:49:62:cf:df:04:3a: 16:26:ea:0a:82:c7:2f:f8:dc:c1:a0:f7:4c:2a:50: 0d:8b:9d:f3:26:e3:95:ee:9e:ef:e9:5e:c2:81:ea: d6:89:ff:1c:bb:71:07:db:41:b0:e5:68:61:8c:61: f1:18:3c:d9:a6:90:3a:04:98:90:4d:1a:68:18:b2: 89:3a:a1:84:37:c9:37:34:28:dc:80:dc:7e:75:2b: 42:cb:4d:02:fa:d0:d8:57:79:46:f5:fb:a5:41:8a: 9d:45:8d:74:a7:0d:76:ee:93:00:fd:23:a0:21:53: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:23:E2:9C:53:EC:C3:A3:C4:85:D9:0C:1F:13:05:6B:63:9F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c82277b8-e102-303a-860a-2c9e6c4d49f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:cd:6e:89:b5:be:97:dd:dd:d4:43:34:83:a8:3a:75:ad: ef:2f:e1:de:85:73:5f:e0:57:ab:de:f9:f6:43:3f:96:b4:5b: b0:3d:fd:e2:74:c7:bf:5e:0e:9b:1d:a2:56:3e:f3:e1:88:a0: d5:98:95:e4:1e:0b:d0:c5:0f:36:9b:cd:55:a4:22:d2:e5:46: 9b:d8:2f:6a:b7:d0:99:ee:bf:12:df:38:62:50:df:1c:6b:29: 32:26:a7:9a:91:f7:d7:37:41:33:f5:bf:02:8b:b4:72:5a:aa: e0:54:2e:ab:35:e2:62:b8:f6:5f:85:13:a4:ab:a6:41:01:f8: 7f:bd:d2:0d:cb:7b:90:3e:bb:f6:51:ac:b1:c6:dc:bc:d0:8c: 79:4a:94:f4:86:c1:b3:88:04:40:72:16:92:5f:49:d2:70:83: 6e:69:8e:8d:9a:25:d2:64:a5:47:f0:61:c3:b1:02:05:8f:88: 7d:52:64:a2:d1:d5:33:ff:bc:b4:6a:35:5f:7d:25:a5:2e:2a: e0:83:48:37:92:2c:ca:43:b8:f0:d8:00:ac:44:c3:5e:15:64: d8:a1:26:82:8d:47:c9:0b:3a:f6:dc:e8:d5:65:1e:49:e8:68: b6:ec:9b:11:43:8e:54:c4:b8:3d:44:c3:5c:41:4d:27:2e:ed: e0:05:a0:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mp3EVAEqgxCrfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NjBjZjBlOTQtOTc1Ny00ZjkxLTk5MzgtYjZjNjc3NDA4Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDF8AVgB0nyRcmZZnz9FqcToG/DpaHXWz3WH 8GENt8PSIR9h3ZR8M+TB7i5YIhYUb1KEjIFdfN3llrVqr3yVmLNnKG2IBth9F0RC J8dLYPcngZS9PfU8EQ8zqFhP+Wmp/Y3B10uK/hgXNxys3PUD3CwKQl48oIeougE5 W0kfe5ANkOow1jMrvx5XhSL+QbBJYs/fBDoWJuoKgscv+NzBoPdMKlANi53zJuOV 7p7v6V7CgerWif8cu3EH20Gw5WhhjGHxGDzZppA6BJiQTRpoGLKJOqGEN8k3NCjc gNx+dStCy00C+tDYV3lG9fulQYqdRY10pw127pMA/SOgIVPSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXhI+KcU+zDo8SF2QwfEwVrY59vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzgyMjc3YjgtZTEwMi0z MDNhLTg2MGEtMmM5ZTZjNGQ0OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJzW6Jtb6X3d3UQzSDqDp1re8v4d6Fc1/gV6ve+fZDP5a0W7A9/eJ0 x79eDpsdolY+8+GIoNWYleQeC9DFDzabzVWkItLlRpvYL2q30JnuvxLfOGJQ3xxr KTImp5qR99c3QTP1vwKLtHJaquBULqs14mK49l+FE6SrpkEB+H+90g3Le5A+u/ZR rLHG3LzQjHlKlPSGwbOIBEByFpJfSdJwg25pjo2aJdJkpUfwYcOxAgWPiH1SZKLR 1TP/vLRqNV99JaUuKuCDSDeSLMpDuPDYAKxEw14VZNihJoKNR8kLOvbc6NVlHkno aLbsmxFDjlTEuD1Ew1xBTScu7eAFoB0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:20 2026 by rpki-client